19 #define U8V(v) ((u8)(v) & U8C(0xFF))
20 #define U32V(v) ((u32)(v) & U32C(0xFFFFFFFF))
26   (((u32)((p)[0])      ) | \
33     (p)[0] = U8V((v)      ); \
37   } while (0)
58   x->chacha_input[4] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
68   x->chacha_input[8] = U8TO32_LITTLE(k + 0);  in chacha_keysetup()
72   x->chacha_input[0] = U8TO32_LITTLE(constants + 0);  in chacha_keysetup()
81   x->chacha_input[12] = 0;  in chacha_ivsetup()
82   x->chacha_input[13] = 0;  in chacha_ivsetup()
83   x->chacha_input[14] = U8TO32_LITTLE(iv + 0);  in chacha_ivsetup()
90   u32 x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15;  in chacha_encrypt_bytes()  local
98   j0 = x->chacha_input[0];  in chacha_encrypt_bytes()
117       for (i = 0;i < bytes;++i) tmp[i] = m[i];  in chacha_encrypt_bytes()
133     x11 = j11;  in chacha_encrypt_bytes()
138     for (i = 20;i > 0;i -= 2) {  in chacha_encrypt_bytes()
142       QUARTERROUND( x3, x7,x11,x15)  in chacha_encrypt_bytes()
144       QUARTERROUND( x1, x6,x11,x12)  in chacha_encrypt_bytes()
159     x11 = PLUS(x11,j11);  in chacha_encrypt_bytes()
166     x0 = XOR(x0,U8TO32_LITTLE(m + 0));  in chacha_encrypt_bytes()
177     x11 = XOR(x11,U8TO32_LITTLE(m + 44));  in chacha_encrypt_bytes()
190     U32TO8_LITTLE(c + 0,x0);  in chacha_encrypt_bytes()
201     U32TO8_LITTLE(c + 44,x11);  in chacha_encrypt_bytes()
209         for (i = 0;i < bytes;++i) ctarget[i] = c[i];  in chacha_encrypt_bytes()